Discussion Locked

LDAP page size

0 helpful
5 replies
Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
We have a developer working on an application so HR can lock out users. By default, active directory sets all queries to return 1000 users. Since we have nearly 2000 users, this won't work. Using ntdsutil, we can change this to the number we'd like. What are the consequences of this? We're currently working on a test domain, but we want to be aware of any issues we may run into if we do this on our primary domain.

5 replies

by rewrite

Why don't you set your query to return paged results and then you wouldn't need to increase the maxpagesize? The biggest drawback to increasing maxpagesize is the increased risk of DoS attacks.

Cheers.

RW

by p.j.hutchison

I have changed this value and have not come across any problems. We have over 30,000 users on our domain.

This discussion is closed to new replies.